EtherPK User Docs

Your EtherPK Account

Your EtherPK Account is one sign-in for the three sites of the EtherPK managed service: www.etherpk.com for the Account and Billing pages, app.etherpk.com for the EtherPK app, and sync.etherpk.com for the Sync Server's own pages. When you sign in on www.etherpk.com, you are also signed in to the app and the Sync Server pages the next time you open them. Sign out of EtherPK on any site signs you out of all three.

You need an account only for synced graphs. Local graphs and the demo work without one. Your devices use Encryption Keys to decrypt the notes in a synced graph, and each device unlocks those keys with your Recovery Code or with approval from another of your devices. Your account proves who you are to the Sync Server, but it never holds your Encryption Keys. So resetting your password or changing your email address leaves your notes and keys as they were, and a new device still has to unlock its keys after you sign in. See Recovery Code And Device Approval for more information.

Every new account starts on the Free plan. You need Sync+, a paid subscription through Stripe, to own synced graphs, but you can join a graph that someone shares with you on either plan. The graphs you own are read-only while a payment is overdue past its fix-by date or while the Sync Server cannot confirm your plan. When Sync+ ends, they become read-only too, and EtherPK deletes them after a retention period.

While you are signed in, select your email address on the right of the header to open the account menu. It has the same links on all three sites: Account for your profile and security settings, Billing for your plan and payments, and Access tokens for agents.

Create an account

  1. On www.etherpk.com, select Get started, or Sign in and then Register.
  2. Enter your name, email address and password. The password needs at least 8 characters and cannot be a commonly used one.
  3. Select Create account.

You are signed in straight away and land on the Account page, or on the Billing page if you came from the pricing page. If the form shows GitHub or Google, you can register with either of them instead of a password.

If you registered with a password, you also get an email with a Verify email address button. Verify your address before anyone shares a graph with you: an invitation sent to an unverified address does not reach you. To get another verification email, select Resend verification email on the Account page.

Sign in

On www.etherpk.com, select Sign in and enter your email address and password, or select GitHub or Google if your account is connected to one of them. After you add a passkey on the Account page, you can also select Sign in with a passkey.

If two-factor authentication is on, you enter the 6-digit code from your authenticator app after your password. To sign in without the app, select Use a backup code and enter one of your saved backup codes.

To reset a forgotten password:

  1. On the sign-in page, select Forgot password?.
  2. Enter your email address and select Send reset link.
  3. Within one hour, open the link in the email.
  4. Enter the new password twice and select Reset password.

The link works only once. Resetting your password signs you out on every device and revokes every access token, so a Headless Client then needs a new Agent Setup Code. See The Headless Client for more information.

Account settings

To change your email address, enter the new one in New email address on the Account page, add your current password if your account has one, and select Change email. If your current address is verified, a link to confirm the change goes there first, so you find out about any change you did not make. The new address then gets a verification link, and the change takes effect when you open it.

Under Connected accounts, you can Connect or Disconnect GitHub and Google.

To change your password, enter your current password and the new one twice under Change password, then select Update password. Leave Sign out of other devices ticked (the default) to sign every other browser out of your account.

To change your name or delete your account, email mail@etherpk.com from the address your account uses. Cancel Sync+ before you ask for deletion.

Two-factor authentication and passkeys

To turn on two-factor authentication:

  1. On the Account page, under Two-factor authentication, select Enable.
  2. Enter your current password and select Continue.
  3. Scan the QR code with your authenticator app, or enter the secret shown under it.
  4. Save the ten backup codes.
  5. Enter the 6-digit code from the app and select Verify & Enable.

You see the backup codes only this once, and each one works for a single sign-in, so keep them somewhere safe.

To turn two-factor authentication off, select Disable, enter your current password and select Disable 2FA.

A passkey lets you sign in with your fingerprint, face or screen lock instead of a password. To add one, select Add a passkey under Passkeys, give it a name, select Continue and confirm in your browser. These passkeys only sign you in to your account and are separate from the passkeys that unlock Protected Documents.

Signed-in sessions

The Sessions list on the Account page shows every browser signed in to your account, with its system, sign-in date and IP address. To end a session at once, select Sign out in its row. Sign out of other sessions ends every session except the one you are using, the same as changing your password with Sign out of other devices ticked. Both leave your access tokens active, so revoke any token you no longer trust on the Access tokens page.

Signing a session out does not replace your Encryption Keys, so if a device was lost or might have been copied, replace the keys too (see Recovery Code And Device Approval).

Sync+ and billing

Free Sync+
Price Nothing Monthly subscription
Local graphs Yes Yes
Join synced graphs shared with you Yes Yes
Own synced graphs, with encrypted sync, live co-editing and managed storage No Yes

Joining someone else's graph costs you nothing, because the Players in a graph use its owner's allowance. See Sharing A Graph for more information.

To start Sync+:

  1. In the account menu, select Billing.
  2. Select the button that starts your Sync+ trial.
  3. In the Stripe checkout, enter your card and billing address.

Stripe takes your card details when the trial starts, but you pay nothing if you cancel before it ends.

To cancel, select Payment details on the Billing page and cancel the subscription in the Stripe customer portal. Cancelling stops the renewal, so Sync+ stays active until the paid period or the trial ends.

Failed payments

When a Sync+ payment fails, a notice with a Fix payment button appears on the Billing and Account pages, on the Graphs page in the app, and on the Sync Server pages. If your bank asks for confirmation, the Billing and Account pages show Confirm payment instead. On the Billing page the button opens the Stripe customer portal, and on every other page it takes you to the Billing page.

On the Billing and Account pages, the notice also gives a fix-by date. The graphs you own stay writable until then, so fix the payment before that date passes. From that date they are read-only until the payment goes through, and the Graphs page marks them Read-only.

End of a Sync+ subscription

Sync+ ends when a cancelled subscription reaches its end date, or when Stripe cancels it after a failed payment. The graphs you own then become read-only and the Graphs page marks each one Read-only, but you can still open, export and delete them. Before EtherPK deletes them, export anything you want to save, or keep a Local Mirror (a plain copy of the graph). See Keeping A Local Copy Of A Synced Graph for more information.

Graphs shared with you belong to their owner, so the end of your Sync+ does not affect them.

If you edit a graph you own while it is read-only, its sync status shows Not syncing and a notice offers Restart Sync+, or Fix payment while a payment is overdue. Your device keeps the edits and syncs them once your plan allows, so you lose nothing you type in the meantime. To make the graphs you own writable again, restart Sync+ on the Billing page.

Sign out

To sign out, select Sign out of EtherPK in the account menu on any site. Signing out deletes nothing, but it locks your Encryption Keys in this browser. The keys lock in the same way when your sign-in ends from somewhere else, for example when you reset your password or sign a session out on the Account page. Either way, before your synced graphs open the next time you sign in, you have to unlock your Encryption Keys with your Recovery Code or with approval from another device.

  • Choosing Where To Store Your Notes
    • Each device you add a synced graph to keeps a working copy in its browser storage. Edits reach your other devices, and any Players you invite, while they are online. To own synced graphs, you need an EtherPK account with Sync+ (see Your EtherPK Account). A graph that someone shares with you counts against the owner's plan, so it works on any plan. See Synced Graphs for more information.
  • Glossary
    • | EtherPK Account | Your one sign-in for EtherPK, which proves who you are. Signing in decrypts nothing, so a password reset leaves your notes and Encryption Keys as they were. | Your EtherPK Account |
    • | Free plan | The plan every new account starts on, which is enough to join shared graphs. You need Sync+ to own a synced graph. | Your EtherPK Account |
    • | Sync+ | The paid subscription you need to own synced graphs. | Your EtherPK Account |
  • Importing A Knowledge Base
    • For a synced graph, an EtherPK account with Sync+, signed in on this device (Your EtherPK Account).
  • Maps
  • Planned Features
    • | Changing your name, or deleting your account and cancelling any Sync+ subscription, on the Account page | The Account page has neither, so email a request from the address on your account. If you are deleting your account, cancel Sync+ first. | Your EtherPK Account |
  • Protected Documents
    • Each binding belongs to one graph in one browser on one device, and the app never syncs or exports it. These passkeys are separate from the ones you use to sign in to Your EtherPK Account.
  • Recovery Code And Device Approval
    • Once you confirm, the old code and the keys on your other devices stop working, and you unlock those devices again with the new code or by approval. A device that is still signed in to your EtherPK Account can reach the Sync Server, and although it cannot unlock the new keys, it could reset them. Sign a lost device out under Sessions on the Account page (see Your EtherPK Account).
  • Sharing A Graph
    • If the owner's Sync+ ends, a payment is overdue or the plan is not confirmed, the graph becomes Read-only and nobody can write to it. Invite is hidden while the graph is read-only, but the owner can still transfer ownership. See Your EtherPK Account for more information.
  • Synced Graphs
    • Otherwise, select Sign in in the app header and sign in with your EtherPK Account. The header then shows your email address and a menu where Sign in was. To sign out, or to sign in another way, see Your EtherPK Account.
    • Your plan limits how many graphs you can own, their storage, how many Players each can have and how large a single file can be. Edits and files from Players count against the owner's allowance. See Your EtherPK Account for more information.
  • Troubleshooting
  • Using AI Agents With Your Notes
    • Each device has one agent token. The Access tokens page in the account menu lists it with an Agent badge, under the name Agent on followed by the device name. The token can read and write graphs. It cannot reset or replace the Encryption Keys, make tokens or Agent Setup Codes, approve another device, invite or remove members, delete graphs, images or files, or reach the Settings Vault. See Your EtherPK Account and How Encryption Works for more information.